Duo Two Factor Authentication is currently for available to all Eastern Washington University employees and students.
Two-factor authentication through Duo will not only help secure the campus network, it will also ensure only authorized users can access critical information, such as paychecks and your sensitive information. In addition to easy enrollment on a device you already have, Duo’s secure cloud-based environment meets all federal and industry compliance regulations as well.
Register for the EWU Two Factor Authentication service. We recommend registering more than one device so you have a back-up if your device is lost, stolen, broken or otherwise unavailable.
There are several methods that can be used, including a mobile device app, SMS text message, and voice phone call options. While using a mobile device is most convenient option and the one that most users prefer, university employees may request a hardware token instead. Replacements for lost or stolen tokens will be charged to the user’s department.
If you use Duo Mobile, there is no data stored on your smartphone or tablet. Period. We use Duo because it’s simple and secure, and one of the reasons for this is it creates no records on your personal device.
If you receive phone callbacks, there is no data on your phone and you can delete the metadata from your phone’s history of recent incoming calls because it’s transitory and the administrative purpose is fulfilled as soon as you’ve completed the call.
In each case, the result is the same: no data related to 2FA on your device that’s subject to disclosure.
Yes, you can. If you do not want to download and use the Duo mobile app, you can specify this during the device enrollment process. You must choose “other” when selecting the smartphone’s operation system.
After reinstalling the Duo Mobile app, you can re-activate your account using the Manage Devices site. There, you can select the “Manage Devices” option and follow the prompts. The Duo Mobile app also now has a restore option, learn more about using it here.
If, as recommended, you’ve added your office phone or another 2FA device to your Duo account, just select the appropriate device or calling option during login. If you didn’t, please contact the IT Help Desk.
Yes. If you are using a smartphone, you can simply use the Duo mobile app to generate a passcode each time authentication is required. Data service is not needed to generate passcodes through the Duo Mobile app. If you have a token, just bring it along with you while traveling. If you are not able to use your mobile device while traveling and don’t have a token, other options are available. For additional information, consult this article in our knowledge base: Traveling with Duo
Individuals who are traveling internationally should check with the Director of Risk Management regarding potential export control issues associated with traveling with different types of multi-factor authentication technologies in accordance with EWU Policy 201-10 (Export Control).
A variety of tokens are shown here:
We’ve posted additional information in our knowledgebase:
- Two-factor Authentication Frequently Asked Questions
- Duo Two-factor Authentication Frequently Asked Questions
- Two-factor Authentication Token Frequently Asked Questions
- Duo Remember Me for 7 Days
- Traveling with Duo